From 8bd575df2ec0d4a17b6f59116d555b64f5bb1312 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alexander=20F=C3=A6r=C3=B8y?= Date: Wed, 15 Oct 2014 10:00:30 +0200 Subject: [PATCH 1/2] Disable SSLv3 --- src/core/network-openssl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/core/network-openssl.c b/src/core/network-openssl.c index 768fd540..e16403ec 100644 --- a/src/core/network-openssl.c +++ b/src/core/network-openssl.c @@ -475,7 +475,7 @@ static GIOChannel *irssi_ssl_get_iochannel(GIOChannel *handle, int port, SERVER_ g_error("Could not allocate memory for SSL context"); return NULL; } - SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2); + SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3); SSL_CTX_set_default_passwd_cb(ctx, get_pem_password_callback); SSL_CTX_set_default_passwd_cb_userdata(ctx, (void *)mypass); From 136efda1bc54a49c89bbb3967d55b735e2788f72 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alexander=20F=C3=A6r=C3=B8y?= Date: Wed, 15 Oct 2014 20:14:17 +0200 Subject: [PATCH 2/2] Add NEWS entry on SSLv3 --- NEWS | 1 + 1 file changed, 1 insertion(+) diff --git a/NEWS b/NEWS index 5d313da1..de36d195 100644 --- a/NEWS +++ b/NEWS @@ -1,4 +1,5 @@ v0.8.18-head 2014-XX-YY The Irssi team + + Disable SSLv3 due to the POODLE vulnerability. v0.8.17 2014-10-11 The Irssi team + Document that SSL connections aren't properly handled during /UPGRADE. See Github PR #39.